Snapshot 220831

Document
security.txt
URL
https://urlbox.com/.well-known/security.txt
Fetched
HTTP status
200
Content type
text/plain; charset=utf-8
Fetch mode
static
Size
887 bytes
SHA-256 (raw)
635577fbdad1c87a641824c8536d8630cc106aabca407f27894e562b3b8c20ff
SHA-256 (normalized text)
dfe81029751d1d19dc236f2e82403f297cca42a30ed845b129875349df04a281

Raw (normalized text)

Scripts and page chrome removed; this is what change detection compares.

# Our security address
Contact: security@urlbox.com
Preferred-Languages: en
Canonical: https://urlbox.com/.well-known/security.txt
# Our security policy. Please read this before undertaking research or reporting any issues
Policy: https://docs.google.com/document/d/1UPixSShO3QRbtnkCmLM28Sl5XMmCrW8vxvePdSJxqsY
# For the avoidance of doubt, we do not consider these to be reportable issues:
#
# 1. Volumetric vulnerabilities (i.e. denial-of-service or overwhelming our
# service with a high volume of requests)
#
# 2. ssh and ssh username enumeration
#
# 3. TLS configuration weaknesses (i.e. weak ciphersuite support, TLS1.0
# support, etc)
#
# 4. Use of older jQuery libraries
#
# 5. Email configuration (SPF, DKIM, DMARC)
#
# 6. Gaps in common best practice such as missing security headers (CSP,
# x-frame-options, x-prevent-xss etc)
#
# 7. Non-exploitable vulnerabilities